Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa
File: 5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa (raw, json)
Hash identifier: 6T9MxMsj+Yd+5a7kNiFxBu+QNTp5bwUIT1UNsHSapCY=
Subject key identifier: 35:43:03:89:64:DB:2B:EA:36:74:A8:61:6A:12:23:38:44:37:BF:66
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3720CCC99AD2C8DBB8DD37318E464FBDB075CE87
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 199.255.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:20:cc:c9:9a:d2:c8:db:b8:dd:37:31:8e:46:4f:bd:b0:75:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=2472b7d1f21e14ee2582c106092cdceb4162c0a52ad4161087123798598698ce, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:2f:3f:26:20:85:56:c9:1b:ce:dd:fe:c5:
c7:7a:e1:3c:f2:ec:6e:d8:ac:28:bc:72:4a:4d:dc:
1c:cf:b3:1d:4e:c6:32:37:49:87:12:5c:b5:df:13:
e0:49:09:82:24:2c:29:da:3a:12:47:4c:92:b8:e0:
0d:01:b2:4e:f7:10:8b:4c:42:e2:86:48:b7:43:7c:
4a:02:90:d8:33:db:5c:b1:ed:c5:ba:37:63:49:0c:
9a:e6:05:11:f4:32:c3:42:79:a2:58:78:17:78:e6:
1c:ed:d6:ab:97:70:c3:fa:06:58:8d:a0:15:79:94:
f8:88:2a:21:1a:f4:b4:d8:f6:ab:0b:14:03:63:e8:
e0:ff:9e:46:b5:dc:fd:4c:c4:36:c1:ac:24:f1:31:
b8:47:38:2a:6c:28:34:4b:58:6d:c3:f7:4b:e1:e8:
00:0d:e3:f6:c3:21:e4:07:b2:80:e7:95:a1:53:18:
b8:17:2e:0d:0d:37:4c:82:35:43:a0:bb:fa:4a:60:
9c:8e:9c:19:c0:7f:fe:26:a0:e6:9a:85:c5:54:83:
09:fe:c6:c3:11:96:63:84:5f:23:a0:cf:e0:94:99:
8a:72:b5:5e:f4:9c:a0:72:ec:9b:61:51:8a:14:72:
a3:65:f4:ed:42:ab:e4:db:86:42:46:bb:b9:48:ee:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:03:89:64:DB:2B:EA:36:74:A8:61:6A:12:23:38:44:37:BF:66
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.255.192.0/22
Signature Algorithm: sha256WithRSAEncryption
23:f5:4e:ca:a0:e7:53:ce:f1:11:ef:20:3b:dc:c8:6e:3a:88:
7e:cc:f9:7d:9e:2f:07:64:84:da:1b:90:af:a4:2d:0d:e6:16:
5d:ca:cd:51:94:9f:17:0d:ab:16:8e:44:36:e7:2a:70:39:ae:
4f:fd:fc:23:77:f3:08:2d:0f:ab:9a:32:d8:40:a2:51:4c:fe:
c5:27:d8:9b:c5:cd:6b:82:a0:b3:ef:97:6e:e3:ed:96:d0:2a:
1e:5c:ae:8e:da:c8:5a:f1:f7:e6:af:c2:e0:68:f4:22:db:ec:
85:76:84:c3:84:13:9d:b0:a5:cd:00:36:7d:97:fa:b9:c9:65:
86:5d:91:1b:1b:4e:d2:7f:01:0c:3d:13:d2:41:ac:3f:51:2f:
7f:9b:bd:ff:78:96:a4:f6:41:4b:2c:83:13:86:20:09:51:19:
2a:0c:eb:27:00:ed:52:d6:60:f5:34:3b:b3:6a:bb:9a:04:7e:
1d:0a:06:3f:56:ee:7b:96:f4:20:4c:dd:f8:85:40:7d:7a:fe:
f7:b1:f5:7b:9b:30:bc:44:df:bf:78:72:58:db:9a:2a:40:e2:
3c:7f:de:34:72:80:33:f3:13:d8:03:e9:72:b0:19:75:4f:a2:
2b:79:5a:13:4b:ff:eb:a9:55:cd:34:75:db:eb:9e:e8:d8:0e:
b3:78:2e:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNyDMyZrSyNu43TcxjkZPvbB1zocwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDcyYjdkMWYyMWUxNGVlMjU4MmMxMDYwOTJjZGNlYjQx
NjJjMGE1MmFkNDE2MTA4NzEyMzc5ODU5ODY5OGNlMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcQC8/JiCFVskbzt3+xcd64Tzy7G7YrCi8ckpN3BzPsx1O
xjI3SYcSXLXfE+BJCYIkLCnaOhJHTJK44A0Bsk73EItMQuKGSLdDfEoCkNgz21yx
7cW6N2NJDJrmBRH0MsNCeaJYeBd45hzt1quXcMP6BliNoBV5lPiIKiEa9LTY9qsL
FANj6OD/nka13P1MxDbBrCTxMbhHOCpsKDRLWG3D90vh6AAN4/bDIeQHsoDnlaFT
GLgXLg0NN0yCNUOgu/pKYJyOnBnAf/4moOaahcVUgwn+xsMRlmOEXyOgz+CUmYpy
tV70nKBy7JthUYoUcqNl9O1Cq+TbhkJGu7lI7lCFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNUMDiWTbK+o2dKhhahIjOEQ3v2YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzViNzE5YzQ4LTVhZDgtNDQwZS04N2U1LWFiZjdiYTYwNGI5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBACP1Tsqg51PO8RHvIDvcyG46iH7M
+X2eLwdkhNobkK+kLQ3mFl3KzVGUnxcNqxaORDbnKnA5rk/9/CN38wgtD6uaMthA
olFM/sUn2JvFzWuCoLPvl27j7ZbQKh5cro7ayFrx9+avwuBo9CLb7IV2hMOEE52w
pc0ANn2X+rnJZYZdkRsbTtJ/AQw9E9JBrD9RL3+bvf94lqT2QUssgxOGIAlRGSoM
6ycA7VLWYPU0O7Nqu5oEfh0KBj9W7nuW9CBM3fiFQH16/vex9XubMLxE3794cljb
mipA4jx/3jRygDPzE9gD6XKwGXVPoit5WhNL/+upVc00ddvrnujYDrN4LvA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:39 2025 by rpki-client